Executive Summary
| Summary | |
|---|---|
| Title | zlib vulnerabilities |
| Informations | |||
|---|---|---|---|
| Name | USN-151-2 | First vendor Publication | 2005-07-22 |
| Vendor | Ubuntu | Last vendor Modification | 2005-07-22 |
| Severity (Vendor) | N/A | Revision | N/A |
Security-Database Scoring CVSS v3
| Cvss vector : N/A | |||
|---|---|---|---|
| Overall CVSS Score | NA | ||
| Base Score | NA | Environmental Score | NA |
| impact SubScore | NA | Temporal Score | NA |
| Exploitabality Sub Score | NA | ||
| Calculate full CVSS 3.0 Vectors scores | |||
Security-Database Scoring CVSS v2
| Cvss vector : (AV:N/AC:L/Au:N/C:P/I:P/A:P) | |||
|---|---|---|---|
| Cvss Base Score | 7.5 | Attack Range | Network |
| Cvss Impact Score | 6.4 | Attack Complexity | Low |
| Cvss Expoit Score | 10 | Authentication | None Required |
| Calculate full CVSS 2.0 Vectors scores | |||
Detail
| A security issue affects the following Ubuntu releases: Ubuntu 4.10 (Warty Warthog) Ubuntu 5.04 (Hoary Hedgehog) The following packages are affected: amd64-libs amd64-libs-dev dpkg dpkg-dev dselect ia32-libs ia32-libs-dev On Ubuntu 4.10, the problem can be corrected by upgrading the affected package to version 0.5ubuntu2.1 (ia32-libs and ia32-libs-dev), 1.0ubuntu3.1 (amd64-libs and amd64-libs-dev), and 1.10.22ubuntu2.1 (dpkg, dpkg-dev, dpkg-doc and dselect). On Ubuntu 5.04, the problem can be corrected by upgrading the affected package to version 0.5ubuntu3.1 (ia32-libs and ia32-libs-dev), 1.1ubuntu0.1 (amd64-libs and amd64-libs-dev), and 1.10.27ubuntu1.1 (dpkg, dpkg-dev, dpkg-doc and dselect). In general, a standard system upgrade is sufficient to effect the necessary changes. Details follow: USN-148-1 and USN-151-1 fixed two security flaws in zlib, which could be exploited to cause Denial of Service attacks or even arbitrary code execution with malicious data streams. Most applications use the shared library provided by the "zlib1g" package; however, some packages contain copies of the affected zlib code, so they need to be upgraded as well. |
Original Source
| Url : http://www.ubuntu.com/usn/USN-151-2 |
Alert History
| Date | Informations |
|---|---|
| 2016-04-26 18:16:50 |
|
| 2014-02-17 12:00:27 |
|
